1208 matches found
screencloud.com Open Redirect vulnerability OBB-2316139
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Information Disclosure
atomix is vulnerable to information disclosure. An attacker can access sensitive information when a malicious Atomix node queries distributed variable primitives containing the primitive lists that ONOS nodes use to share important states...
CVE-2020-35215
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
APSB21-119 : Security update available for Adobe Lightroom
Adobe has released updates for Adobe Lightroom for Windows and macOS. This update addresses an Important vulnerability. Successful exploitation could lead to privilege escalation in the context of the current user...
RHEL 8 : mailman:2.1 (RHSA-2021:4838)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4838 advisory. Mailman is a program used to help manage e-mail discussion lists. Security Fixes: mailman: CSRF token bypass allows to perform CSRF attacks...
RHEL 7 : kpatch-patch (RHSA-2021:4798)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4798 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...
[SECURITY] Fedora 35 Update: wordpress-5.8.2-1.fc35
Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...
RHEL 7 : kernel (RHSA-2021:4692)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4692 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...
VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)
3. VMware vCenter Server IWA privilege escalation vulnerability CVE-2021-22048 The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity...
November Continues Streak of Quiet Patch Tuesdays
November continues a recent pattern of relatively peaceful Patch Tuesday cycles. There were only six vulnerabilities rated as Critical this month, with 49 more rated as Important for a total of 55 for the month of November...
VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)
3. VMware vCenter Server IWA privilege escalation vulnerability CVE-2021-22048 The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity...
news.abidjan.net Cross Site Scripting vulnerability OBB-2253330
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
APSB21-110 : Security update available for Adobe InCopy
Adobe has released a security update for Adobe InCopy. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and application denial of service...
APSB21-107: Security update available for Adobe InDesign
Adobe has released a security update for Adobe InDesign. This update addresses critical and Important vulnerabilities. Successful exploitation could lead to arbitrary code execution and application denial of service...
APSB21-96: Security update available for Adobe Prelude
Adobe has released an update for Adobe Prelude for Windows and macOS. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, memory leak and application denial of service...
RHEL 8 : grafana (RHSA-2021:3771)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3771 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Snapshot...
airportgoldentuliphotel.com Cross Site Scripting vulnerability OBB-2158377
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
APSB21-55 Security update available for Adobe Acrobat and Reader
Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address multiple critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...
RHEL 7 : compat-exiv2-026 (RHSA-2021:3233)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3233 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...
CVE-2021-34207
Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...